Online computer hacking has evolved from harmless pranks to big business: gangs of data thieves operate from Russia and China with near impunity. Tens of thousands of stolen credit card numbers are offered for sale on a weekly basis with a single card number selling for as little as $0.40. Home computer users have been overwhelmed by a continuous stream of viruses, trojans, spam, spyware and adware that threaten to introduce unwanted data or steal sensitive data – all while slowing PC’s to a crawl.
A cottage industry has developed for computer “experts” who promise to clean and tune-up home computers for prices ranging between $35 and $100 per treatment. Many of these would-be entrepreneurs are using software tools (often free to download) that can be installed and operated by the average user.
In the first of a two part series, we will look at two indispensable tools for securing your computer or home network. While this series is geared towards internet security, most of the tools described are useful even on machines with no internet access.
Disclaimers
- Neither the author of this article nor the original host websites (Blink7, Cynics Unlimited) are directly affiliated with the authors of any of the software mentioned. All software recommendations are based on available test results, personal experience and feedback from users who have sought technical assistance from the author. No compensation was received for any mention or endorsement of software products.
- Of course none of the following tools can guarantee a 100% safe computer. Hackers, virus-creators and unscrupulous advertising companies are always developing new ways to get around existing security measures and attack/survey the contents of our machines. True network security “experts” are few in number and not all are working for the good guys. Still, there are several classes of consumer-based tools and software packages that will improve the defenses of the average user. Despite some of the annoyances related to installing extra software to “monitor” user activity, consumers should welcome the opportunity to reduce possible instances of data loss, identity theft and other privacy intrusions.
Weapon #1 – Antivirus Tool
Definition:
Strictly speaking, a computer virus is a tiny software program than can replicate itself and transmit from computer to computer via executable code. Targeted transport programs range from the standard .exe file to a macro program embedded in a Microsoft word file. Computers can be infected via local networks, Internet transmission and removable media (including floppy disks, USB keys and burned CD’s). In every day conversation, viruses are classified together with worms, malware, trojans and adware as self-installing, unwanted software capable of delivering a payload to an infected machine. The payload could be innocuous (a simple message), irritating (pop up advertisements) or downright dangerous (deleting files, formatting hard drives). Regardless of payload, these all consume disk space and sap computer resources during execution.
Antivirus software detects and attempts to eliminate viruses by scanning the computer’s memory and files for “signatures” of known viruses. Most antivirus tools have a database of known signatures (sometimes known as virus definitions) that must be updated continually. Files infected with a virus can sometimes be cured but in other cases need to be quarantined or deleted. Some antivirus programs remain active in memory to prevent infections by known viruses and equivalents.
Benefits:
Viruses and similar programs consume resources and cause havoc, period. Antivirus software can prevent small inconveniences like having to reload windows and larger inconveniences such as data loss. Most major packages are easy to install, require minimal configuration and automatically update virus definitions (internet connection required).
Costs and Risks:
Antivirus software can also use computer sources, especially if running continuously in the background. Not all antivirus software is equal and some packages have even proven to be viruses themselves. No single antivirus program performs all types of scans but it is generally not recommended to run more than one package on a single machine. Antivirus programs cannot actively monitor internet traffic and provide only minimal protection against non-viral threats (eg adware embedded inside user-installed software).
Recommended Software:
Choosing an antirvirus programs has taken on nearly religious connotations but the two leading free programs are produced by AVG and Avast. Norton Antivirus and Kaspersky Antivirus dominate the commercial market, though BitDefender Antivirus provides a slightly cheaper and higher-rated alternative.
Weapon #2 – Personal Firewall
Definition:
Similar to the heavy wall used to prevent a fire from spreading throughout a building, network firewalls apply a series of user-defined policies to prevent the movement of malicious or unwanted data into an individual computer or an entire network. Some firewalls can also be configured to prevent certain data from being transmitted away from local machines. Firewalls regulate network traffic flow through the use of “zones” – computers within a trust zone may be able to communicate freely but computers within a less trustworthy zone (usually called the Internet zone) may only be allowed to communicate with trusted-zone computers in certain instances. Data packets containing information not approved by the firewall’s policy are altered or discarded.
The typical consumer-level firewall is software-based and combines network layer filtering with application-layer filtering. Network layer filtering policies filter traffic based on packet-specific attributes such as IP address (source and destination), port and transportation protocol. Application layer filtering policies evaluate traffic by learning the user’s applications (such as a web browser or FTP program) so it can prevent misuse of standard data ports or attempts to sneak data through the wrong port.
Benefits:
A firewall can be the single most useful tool in preventing all types of threats. A properly configured firewall can stop a virus from entering a local network, prevent websites from automatically installing malicious software and stop local spyware from transmitting local data to an outside source. Firewall software can indirectly alert a user to potentially harmful programs when requesting a policy decision on whether to allow a previously-unseen program to connect to the internet.
Costs and Risks:
Even the best firewall is only as good as its policy and few people have the expertise to set up a bullet-proof network system. Recent firewall programs, such as ZoneAlarm, have improved user friendliness by automatically configuring settings for well-known software programs and requesting user decisions via pop-up windows when a previously-unknown program attempts to access the network or perform other low-level operations. Some users may become annoyed by the constant questions and simply turn the firewall off. Other users may inadvertently allow access to a malicious program or prevent necessary access for a legitimate program, putting the local computer at risk. A poor policy is just as dangerous as no policy at all.
Recommended Software:
Matousec’s comprehensive firewall tests resulted in a second place rating for Comodo Internet Security 3.5 (Nov 2008). This highly-configurable firewall is available for free and contains no functionality limitations. Some users have complained about Comodo’s tendency to ask many detailed questions they cannot answer. Changing program settings can alleviate this problem, though the commercial firewall Online Armour 3.x may be a more novice-friendly alternative. ZoneAlarm Pro is another popular program that receives generally high ratings on security tests.
P2P and Bit Torrent users may wish to consider adding Peer Guardian 2 to supplement their preferred firewall program. Peer Guardian blocks all internet communication with IP’s found within several blacklists (P2P, spyware, government, ads). If you’re trading MP3’s on Limewire, chances are you don’t want Media Sentry to know about it.

Recent Comments